Andrew Case

Results 145 comments of Andrew Case

Are there more tests to add related to this ticket @dgmcdona ?

This one mentioned this ticket: https://github.com/volatilityfoundation/volatility3/pull/1743 The title is kind of broad as we wouldn't enforce all the requirements at once (or maybe anytime soon). So I guess its either...

@ikelos exposing the full hex+ascii dump contents of hits is pretty critical. Right now the results of the plugins are pretty bare and useless, and its been the main complaining...

I wasn't trying to put pressure or you vs. me. I will word better in the future. I was trying to relay student response as we have been running some...

Hello @avizack18, Thank you for taking the time to write a detailed ticket. I am curious what the practical benefits of parsing the allocator so deeply are in terms of...

Do you have some Windows 10 samples with the default Defender enabled state to test this? If not, we can run it over some of them soon.

Ok we will run it across our sample set (a couple hundred Windows samples) and report back before/after this patch.

What does this mean?: 'lsmod was using modules that were pulled in only by the "module display plugin"' Is there a ticket or Slack discussion about whatever triggered this PR?...

Hello, We are aware of this issue, but a proper fix is a bit complicated due to some Volatility 3 internals and how address stackers work. We do plan to...

Going to close as stale and feedback stopped.